Skip to content

chore(deps): bump the python-runtime group across 1 directory with 16 updates - #17

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/requirements/python-runtime-bd82371758
Closed

chore(deps): bump the python-runtime group across 1 directory with 16 updates#17
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/requirements/python-runtime-bd82371758

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the python-runtime group with 16 updates in the /requirements directory:

Package From To
ninja 1.13.0 1.13.2
cryptography 46.0.5 50.0.1
fastapi 0.141.1 0.142.1
numpy 2.5.2 2.5.3
onnxruntime 1.29.0 1.30.0
openai 3.3.1 3.22.0
piper-tts 1.4.2 1.8.0
playwright 1.55.0 1.63.0
pydantic 2.13.4 2.13.5
scipy 1.18.0 1.18.1
tokenizers 0.22.2 0.23.2
uvicorn 0.52.4 0.54.0
accelerate 1.14.0 1.15.0
torch 2.13.0 2.14.0
transformers 5.15.1 5.17.0
mlx 0.32.2 0.32.3

Updates ninja from 1.13.0 to 1.13.2

Release notes

Sourced from ninja's releases.

v1.13.2

  • Fix Ninja exit code when interrupted (issue #2681) #2690

v1.13.1

Bugfixes:

  • Fix LINK : fatal error LNK1104: cannot open file on Windows in some cases #2616
  • Compatibility with older distros for Linux ARM version #2619
  • Restore "multiple rules generate" error with dyndep #2621
Commits
  • 3441b63 v1.13.2
  • bd56313 Fix Ninja exit code when interrupted.
  • 79feac0 v1.13.1
  • 5807cf7 Merge branch 'master' into release
  • 31af250 Merge pull request #2636 from jhasse/rsp-crlf
  • 516a0dd Add output test for multiple rules + dyndep, fix #2621
  • 114fb93 Convert \n to \r\n on Windows in rsp files, fix #2616
  • d60673d Merge pull request #2628 from userdocs/workflows-fix-triggers
  • 9659311 prevent duplicate runs being triggered when a release tag is published.
  • b783add Merge pull request #2627 from userdocs/linux.yml-build
  • Additional commits viewable in compare view

Updates cryptography from 46.0.5 to 50.0.1

Changelog

Sourced from cryptography's changelog.

50.0.1 - 2026-08-25


* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 4.0.2.

.. _v50-0-0:


50.0.0 - 2026-07-31

  • SECURITY ISSUE: :func:~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_der and its PEM and S/MIME variants no longer expose distinguishable errors or timing when unwrapping a RecipientInfo's encryptedKey, which could act as a Bleichenbacher oracle for callers that decrypt untrusted messages. A random key is now substituted on failure, as described in :rfc:3218. Credit to @​X1AOxiang for reporting the issue. CVE-2026-69247
  • Deprecated Diffie-Hellman key exchange over finite fields (FFDH). Everything FFDH is deprecated, including the types in cryptography.hazmat.primitives.asymmetric.dh and loading FFDH keys or parameters with the key loading APIs. Users should migrate to a more modern key exchange algorithm.
  • Added xof() class methods to :class:~cryptography.hazmat.primitives.hashes.SHAKE128 and :class:~cryptography.hazmat.primitives.hashes.SHAKE256 for constructing algorithm instances configured for use with :class:~cryptography.hazmat.primitives.hashes.XOFHash.
  • The :mod:X.509 verification <cryptography.x509.verification> APIs are now considered stable and are subject to our API stability policy.
  • Added the :doc:/cobblestone recipe, an implementation of the Cobblestone-128 and Cobblestone-256 instantiations of the C2SP chunked-encryption specification <https://c2sp.org/chunked-encryption>_ for streaming authenticated encryption of large messages.
  • Parsing a Signed Certificate Timestamp list now rejects encodings that carry trailing bytes after the list or after an individual SCT, instead of silently ignoring them.
  • Added support for using :class:~cryptography.x509.Name as a field type in the :doc:/hazmat/asn1/index module.
  • Loading a public key or an EC private key now rejects DER where the subjectPublicKey (or EC publicKey) BIT STRING declares a non-zero number of unused bits, instead of silently ignoring it.
  • Parsing a CRL entry's InvalidityDate extension now rejects a GeneralizedTime that carries fractional seconds or another non-DER form, matching the strict encoding already required for every other X.509 time field.
  • :func:~cryptography.x509.ocsp.load_der_ocsp_request and :func:~cryptography.x509.ocsp.load_der_ocsp_response now reject a request or response whose version field is not v1, the only version defined by RFC 6960, matching the version validation already performed when loading

... (truncated)

Commits

Updates fastapi from 0.141.1 to 0.142.1

Release notes

Sourced from fastapi's releases.

0.142.1

Fixes

0.142.0

Features

Refactors

Docs

Translations

Internal

... (truncated)

Commits

Updates numpy from 2.5.2 to 2.5.3

Release notes

Sourced from numpy's releases.

v2.5.3 (Sep 6, 2026)

NumPy 2.5.3 Release Notes

The NumPy 2.5.3 is a patch release that fixes bugs discovered after the 2.5.2 release. Apart from the usual bug and maintenance work, there are a number of StringDType related fixes for problems discovered during the ongoing string work in the main branch.

This release supports Python versions 3.12-3.15

Changes

  • Casting a fixed-width byte string array (np.bytes_) to StringDType now raises TypeError when the bytes are not valid UTF-8. Previously the invalid bytes were stored as-is and later caused undefined behavior in string operations.

    (gh-32296)

  • MaskedArray._fill_value would become stale when ufuncs that change dtype left the result holding a fill_value typed for the old dtype. The mismatch was silent until something later called _check_fill_value, such as .view(), and then a TypeError would be raised. Now, when the copied fill_value is no longer valid for the new dtype, fall back to the default fill_value for that dtype instead of propagating the stale value. This may raise a ComplexWarning if the fill_value is complex and the new dtype is real.

    (gh-32423)

Contributors

A total of 9 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Charles Harris
  • Iason Krommydas
  • James Davies +
  • Joren Hammudoglu
  • Maanas Arora
  • Matti Picus
  • Nathan Goldbaum
  • Shikhar Goel +
  • Yeonho Kim +

Pull requests merged

A total of 27 pull requests were merged for this release.

  • #32235: MAINT: Prepare 2.5.x for further development

... (truncated)

Commits
  • dd88c0c Merge pull request #32511 from charris/prepare-2.5.3
  • edcac6a REL: Prepare for the NumPy 2.5.3 release
  • fd4d908 Merge pull request #32509 from charris/backport-32496
  • 65bb1da BUG: fix crash in ufunc.resolve_dtypes with a Python scalar type (#32496)
  • 294956e Merge pull request #32506 from charris/backport-32503
  • 26428d9 DOC: fix scipy docs links in intersphinx mapping (#32507)
  • 5fab1cb DOC: use static scipy doc site for intershpinx (#32503)
  • 7beed2f Merge pull request #32481 from ngoldbaum/stringdtype-backport
  • 8972f70 Merge pull request #32478 from charris/backport-32466
  • ab1b589 Merge pull request #32477 from charris/backport-32423
  • Additional commits viewable in compare view

Updates onnxruntime from 1.29.0 to 1.30.0

Release notes

Sourced from onnxruntime's releases.

ONNX Runtime v1.30.0

ONNX Runtime 1.30.0 expands generative AI inference, improves CPU and GPU performance, adds Go bindings, and strengthens runtime reliability. These notes cover changes since ONNX Runtime 1.29.1.

Highlights

  • Expanded CUDA inference support with variable-length causal convolution for continuous batching, speculative decoding in paged XQA, and INT4 paged KV caches with per-channel scales (#32168, #32340, #32515).
  • Improved WebGPU PagedAttention, added GPT-OSS support and INT8 KV-cache block quantization, and extended convolution optimizations (#31727, #32277, #32284, #32420).
  • Added fused CPU LinearAttention kernels for AVX-512, Arm64 NEON, and SVE, plus AVX2 LayerNorm/RMSNorm acceleration (#31674, #31973, #32178, #32356).
  • Added Go bindings for the ONNX Runtime C API and DeepSeek Engram contrib operators (#29615, #32268).

Announcements & Compatibility

  • FP4 QMoE kernels are now enabled by default in CUDA builds, with Windows build support added in this release. Source builds can opt out with -Donnxruntime_USE_FP4_QMOE=OFF (#32096, #32163).
  • CUDA fpA-intB builds now default to a compact kernel set for FP16 activations, INT4/INT8 weights, scale-only quantization, and block_size=32. Set -Donnxruntime_USE_FPA_INTB_GEMM_FULL=ON when building from source to retain the full kernel set, including BF16, zero-point, bias, larger-block-size, and native Hopper variants (#32324).
  • CPU FP16 Gemm and MatMul execution is gated on hardware acceleration. CPU-assigned FP16 nodes without a matching kernel now fall back to FP32 (#32301, #32197).
  • WebGPU plugin EP packaging now supports Linux AArch64. Plugin versions were advanced to WebGPU 0.4.0 and CUDA 0.2 (#32287, #31960, #31970).

Security & Reliability

Model Loading, Memory, and Input Validation

  • Limited nested model-graph depth and canonicalized external-data locations to harden model loading (#32344, #32135).
  • Added checked rounding for BFC arena allocations and fixed prepacked-weight reference lifetimes (#32010, #32040).
  • Strengthened shape, rank, and parameter validation for Split, Scan, GatherND, ScatterND, SpaceToDepth/DepthToSpace, Crop, Conv, Normalizer, and pooling (#29461, #31668, #32034, #32039, #32076, #32157, #32160, #32161, #32345, #32349).
  • Hardened generation and attention input handling, including attention-attribute narrowing, BifurcationDetector inputs, generation subgraph shapes, and QEmbed segment inputs. BeamSearch buffer expansion now uses dynamic shape storage (#31648, #31701, #32009, #32078, #32144).
  • Validated TreeEnsemble node references and bounded subtree comparison, rejected non-finite CPU RoiAlign coordinates, and required ImageScaler bias to match the channel count (#32031, #32043, #32011, #32002).
  • Added an allowlist of safe LoRA adapter parameter data types, validated MatMulFpQ4 shape inputs, and checked MLAS blockwise quantization/dequantization index ranges (#31682, #32032, #32007).

GPU Bounds and Resource Lifetimes

  • Hardened CUDA indexing and buffer-size arithmetic in MatMulNBits, RemovePadding, RotaryEmbedding, SparseAttention, Whisper beam search, NMS, QDQ, and GatherElements (#31643, #31994, #31995, #31996, #31998, #32014, #32029, #32030).
  • Fixed overflow in CUDA reduction scans and Softmax offset arithmetic, and handled zero-sized outputs in CUDA random-generator kernels (#32137, #32330, #31997).
  • Fixed CUDA MultiHeadAttention shared-cache scratch lifetimes and kept CudaAsyncBuffer staging storage alive across CUDA graph replay (#31968, #32121).
  • Fixed WebGPU out-of-bounds subgroup-matrix loads for partial tiles, zero-initialized writable device-allocator buffers, and rejected foreign GPU handles in built-in data transfers (#32364, #32063, #32317).

Dependencies and Tooling

  • Upgraded Protobuf to 33.6 and refreshed Python documentation dependencies, including an ONNX security-related update (#29906, #32190, #32424).
  • Updated JavaScript dependencies including js-yaml, joi, fast-uri, and the Next.js end-to-end fixture (#32397, #32486, #32488, #32505, #32508).
  • Pinned GitHub Actions to full-length commit SHAs and strengthened packaging infrastructure with authenticated package feeds and NPM network isolation (#32176, #32005, #32440).

New Features

Core APIs & Runtime

  • Added Go bindings for the ONNX Runtime C API (#29615).
  • Extended memory importing with host-pointer support and added access to preallocated outputs through KernelContext::GetPreallocatedOutput (#29726, #32089).
  • Added packed-attention workspace recipes and estimates, and made workspace input-shape handling aware of optional inputs (#32283, #32321, #32312).
  • Added DeepSeek Engram contrib operators, EngramGate and NGramHashMapping, and expanded kernel coverage for Qwen-3.5 operators (#32268, #32106).

... (truncated)

Commits
  • f2c39fe [CUDA] Add INT4 paged KV cache with per-channel scales (#32515)
  • 5894ba8 Add portable random-access file reads to Env (#32503)
  • a2ee3eb Fix CUDA plugin device discovery on WSL (#32517)
  • b652e59 [WebGPU] Prepack Conv weights for the im2col-matmul path (#32420)
  • 0f0f29f Get rid of spurious warning about not being able to find spectre mitigation (...
  • 23dd651 Register ONNX schemas only when static registration is disabled (#32353)
  • 33af5d3 Release external data loaders after graph initialization (#32502)
  • 2e3c24d Clarify external initializer and EP context path interaction (#32442)
  • e76036b [CUDA] Pin FP8 GEMV residency for grids just past two blocks per SM (#32433)
  • 82583c5 Add session option for a BNHS GroupQueryAttention Value cache layout (#32139)
  • Additional commits viewable in compare view

Updates openai from 3.3.1 to 3.22.0

Release notes

Sourced from openai's releases.

v3.22.0

3.22.0 (2026-09-29)

Features

v3.21.0

3.21.0 (2026-09-29)

Features

v3.20.0

3.20.0 (2026-09-28)

Features

  • api: add Agents credential and session options (#3967) (bb68198)
  • api: add Cyber access programs to Responses (#3956) (09c5b6f)
  • responses: opt in to incremental WebSocket text and tool snapshots (#3973) (d0207b4)
  • responses: preserve detailed WebSocket accumulator snapshots (#3981) (a380cf2)

Bug Fixes

  • client: retry unmapped TLS transport errors (#3982) (0d35a26)
  • live: avoid hangs at fractional transcript grouping deadlines (#3970) (4ef4129)
  • live: keep query parameters out of WebSocket endpoint paths (#3972) (f9c458b)
  • live: preserve caller queues and prevent uncertain WebSocket replay (#3980) (80e9686)
  • realtime: preserve base URL queries in WebSocket upgrades (#3971) (f7bd4a7)
  • realtime: retain configured queues without replaying attempted sends (#3978) (a52805c)

Chores

  • api: clarify documented API error responses (#3965) (384fee3)
  • api: document batch error responses (#3961) (6e4a79c)
  • api: document files and uploads error responses (#3960) (a9d727f)
  • api: document fine-tuning and model errors (#3964) (5d4003c)
  • api: document Responses not-found errors (#3959) (63099e7)
  • api: document stored chat completion errors (#3963) (a73fe0c)

v3.19.2

3.19.2 (2026-09-23)

... (truncated)

Changelog

Sourced from openai's changelog.

3.22.0 (2026-09-29)

Features

3.21.0 (2026-09-29)

Features

3.20.0 (2026-09-28)

Features

  • api: add Agents credential and session options (#3967) (bb68198)
  • api: add Cyber access programs to Responses (#3956) (09c5b6f)
  • responses: opt in to incremental WebSocket text and tool snapshots (#3973) (d0207b4)
  • responses: preserve detailed WebSocket accumulator snapshots (#3981) (a380cf2)

Bug Fixes

  • client: retry unmapped TLS transport errors (#3982) (0d35a26)
  • live: avoid hangs at fractional transcript grouping deadlines (#3970) (4ef4129)
  • live: keep query parameters out of WebSocket endpoint paths (#3972) (f9c458b)
  • live: preserve caller queues and prevent uncertain WebSocket replay (#3980) (80e9686)
  • realtime: preserve base URL queries in WebSocket upgrades (#3971) (f7bd4a7)
  • realtime: retain configured queues without replaying attempted sends (#3978) (a52805c)

Chores

  • api: clarify documented API error responses (#3965) (384fee3)
  • api: document batch error responses (#3961) (6e4a79c)
  • api: document files and uploads error responses (#3960) (a9d727f)
  • api: document fine-tuning and model errors (#3964) (5d4003c)
  • api: document Responses not-found errors (#3959) (63099e7)
  • api: document stored chat completion errors (#3963) (a73fe0c)

3.19.2 (2026-09-23)

Bug Fixes

  • preserve single files for fallback extraction paths (#3875) (bfd3680)

... (truncated)

Commits
  • 49e4366 release: 3.22.0 (#3990)
  • f5dddb5 feat(api): add computer use to beta agents (#3989)
  • 62c1fe5 release: 3.21.0 (#3987)
  • 160b2c0 feat(api): add GPT-6.1 Sol model identifier (#3986)
  • 68b173a release: 3.20.0 (#3957)
  • 0d35a26 fix(client): retry unmapped TLS transport errors (#3982)
  • a380cf2 feat(responses): preserve detailed WebSocket accumulator snapshots (#3981)
  • 80e9686 fix(live): preserve caller queues and prevent uncertain WebSocket replay (#3980)
  • 78074d7 test(realtime): verify recovery boundaries and replacement credentials (#3979)
  • a52805c fix(realtime): retain configured queues without replaying attempted sends (#3...
  • Additional commits viewable in compare view

Updates piper-tts from 1.4.2 to 1.8.0

Release notes

Sourced from piper-tts's releases.

v1.8.0

  • Add Thai phonemizer using TLTK in the new th extra
    • --data.phoneme_type thai for training; "phoneme_type": "thai" in a voice config for synthesis
    • espeak-ng's Thai voice is a placeholder: its th_dict holds no lexicon, so unspaced Thai is never segmented; the leading vowels เ แ โ ใ ไ are not reordered; and a tone mark deletes the syllable's vowel, collapsing ป่า/ป้า/ป๊า/ป๋า to the same phonemes
    • TLTK does dictionary-based word segmentation and emits a tone digit (1-5) per syllable, in the same style phonemize_chinese uses for Mandarin tones
    • The whole inventory already has ids in the default IPA map, so Thai voices stay compatible with the IPA-based (espeak) warmstart
  • Add script/setup --th, and install the th extra in CI so the Thai tests run

v1.7.0

  • Add Japanese phonemizer using OpenJTalk (pyopenjtalk-plus) in the new ja extra
    • --data.phoneme_type japanese for training; "phoneme_type": "japanese" in a voice config for synthesis
    • espeak-ng has no kanji coverage (it reads out Unicode character names) and no pitch accent
    • Full-context labels are parsed for pitch accent and mapped to IPA, so Japanese voices stay compatible with the IPA-based (espeak) warmstart
  • Add script/setup --ja, and install the ja extra in CI so the Japanese tests run
  • libpiper: add piper_create_options and piper_create_with_options(), with piper_create() kept as a wrapper for ABI compatibility

v1.6.1

  • Run the g2pW model through piper.g2pw_onnx instead of g2pw.api, dropping torch (~750 MB installed) and requests from the zh extra
    • g2pw.api imports torch only to build padded tensors and iterate batches; the model itself already ran under onnxruntime
    • Also 1.5-2x faster, since it no longer forks DataLoader worker processes on every call
    • g2pW is still required, for its pinyin/bopomofo lookup tables

v1.6.0

  • Add Hebrew phonemizer using Nakdimon

v1.5.0

  • Add libpiper C++ CLI executable ported from the legacy Piper repository, plus a C++ test suite
  • Fix libpiper builds on Windows (MSVC, MSYS2-GCC) and Windows CI
  • Bump embedded espeak-ng version
  • Add default speaker id for multi-speaker voices
  • Add vowel clustering support (--data.vowel_clusters)
  • Add in-memory patching for alignments
  • Training: add MRD (Multi-Resolution STFT) discriminator, loss/MOS tracking with UTMOS, silence-trim fixes, and dataloader performance improvements
  • Pass custom phoneme id map when training
Changelog

Sourced from piper-tts's changelog.

1.8.0

  • Fix the training learning rate never decaying
    • VitsModel sets automatic_optimization = False, and under manual optimization Lightning does not step the schedulers returned by configure_optimizers — nothing else did either, so the learning rate stayed pinned at its initial value for the whole run
    • Every checkpoint written before this reports lr_schedulers last_epoch=0 no matter how many epochs it trained
    • on_train_epoch_end now steps both schedulers, and logs lr_g/lr_d
  • Derive --model.lr_decay/--model.lr_decay_d from --trainer.max_epochs when they are not set explicitly
    • The old default (0.999875, from upstream VITS) assumes a ~20,000-epoch schedule and decays the learning rate by only ~1% per 100 epochs, so simply stepping the scheduler would have changed almost nothing
    • The derived decay anneals to --model.lr_final_ratio (default 0.05) of the initial learning rate over the run; --model.lr_final_ratio 1.0 keeps it constant
    • Open-ended runs (max_epochs=-1, the default) have no run length to anneal over and still fall back to the upstream constants, with a warning
    • Resuming with --ckpt_path re-asserts the configured decay: ExponentialLR.state_dict() carries gamma, so the restored value would otherwise silently replace it
  • Fix a resume silently reverting to the warmstart checkpoint
    • LightningCLI._parse_ckpt_path merges a resumed checkpoint's saved hyper_parameters back over the parsed config, so --model.warmstart_ckpt comes back even when it is absent from the command line
    • Trainer restores model weights before on_fit_start and the optimizer/loop state after it, so the warmstart overwrote the resumed weights with the base model while keeping the restored epoch — discarding every epoch trained so far
    • on_fit_start now skips both warmstart paths whenever trainer.ckpt_path is set, and logs that it did
  • Add script/libritts_r_to_csv, which converts extracted LibriTTS-R splits to Piper's metadata CSV
    • Writes through csv.writer(delimiter="|") so quoting round-trips through the csv.reader the trainer uses — a hand-rolled "|".join() silently drops the quotation marks that LibriTTS dialogue is full of
    • Falls back from .normalized.txt to the chapter .trans.tsv to .original.txt, and skips utterances whose audio has no transcript
    • Optional --min-seconds/--max-seconds filtering and a --stats duration histogram
  • Add Thai phonemizer using TLTK in the new th extra
    • --data.phoneme_type thai for training; "phoneme_type": "thai" in a voice config for synthesis
    • espeak-ng's Thai voice is a placeholder: its th_dict holds no lexicon, so unspaced Thai is never segmented; the leading vowels เ แ โ ใ ไ are not reordered; and a tone mark deletes the syllable's vowel, collapsing ป่า/ป้า/ป๊า/ป๋า to the same phonemes
    • TLTK does dictionary-based word segmentation and emits a tone digit (1-5) per syllable, in the same style phonemize_chinese uses for Mandarin tones
    • The whole inventory already has ids in the default IPA map, so Thai voices stay compatible with the IPA-based (espeak) warmstart
  • Add script/setup --th, and install the th extra in CI so the Thai tests run

1.7.0

  • Add Japanese phonemizer using OpenJTalk (pyopenjtalk-plus) in the new ja extra
    • --data.phoneme_type japanese for training; "phoneme_type": "japanese" in a voice config for synthesis
    • espeak-ng has no kanji coverage (it reads out Unicode character names) and no pitch accent
    • Full-context labels are parsed for pitch accent and mapped to IPA, so Japanese voices stay compatible with the IPA-based (espeak) warmstart
  • Add script/setup --ja, and install the ja extra in CI so the Japanese tests run
  • libpiper: add piper_create_options and piper_create_with_options(), with piper_create() kept as a wrapper for ABI compatibility

1.6.1

  • Run the g2pW model through piper.g2pw_onnx instead of g2pw.api, dropping torch (~750 MB installed) and requests from the zh extra
    • g2pw.api imports torch only to build padded tensors and iterate batches; the model itself already ran under onnxruntime
    • Also 1.5-2x faster, since it no longer forks DataLoader worker processes on every call
    • g2pW is still required, for its pinyin/bopomofo lookup tables

1.6.0

  • Add Hebrew phonemizer using Nakdimon

1.5.0

  • Add libpiper C++ CLI executable ported from the legacy Piper repository, plus a C++ test suite
  • Fix libpiper builds on Windows (MSVC, MSYS2-GCC) and Windows CI

... (truncated)

Commits
  • 639388b Bump version
  • 46d7947 Merge pull request #293 from OHF-Voice/claude/thai-piper-training-feasibility...
  • 9336d10 Fix Thai test collection aborting CI on a broken optional dependency
  • fb14e09 Add Thai phonemizer (TLTK segmentation + G2P -> IPA + tone digits)
  • 850c45a fix: Phase 1 relaxed poly fallback for mobile (#289)
  • b275826 Add Chinese pinyin support – Phase 1 (monophonic dict fallback, honest scopin...
  • 7b8e8f7 Merge pull request #275 from OHF-Voice/claude/version-1-7-0-release-2b37ec
  • 222159f Silence pylint redefined-outer-name in the...

    Description has been truncated

@dependabot
chore(deps): bump the python-runtime group across 1 directory with 16…
8477952 
… updates

Bumps the python-runtime group with 16 updates in the /requirements directory:

| Package | From | To |
| --- | --- | --- |
| [ninja](https://github.com/ninja-build/ninja) | `1.13.0` | `1.13.2` |
| [cryptography](https://github.com/pyca/cryptography) | `46.0.5` | `50.0.1` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.141.1` | `0.142.1` |
| [numpy](https://github.com/numpy/numpy) | `2.5.2` | `2.5.3` |
| [onnxruntime](https://github.com/microsoft/onnxruntime) | `1.29.0` | `1.30.0` |
| [openai](https://github.com/openai/openai-python) | `3.3.1` | `3.22.0` |
| [piper-tts](https://github.com/OHF-voice/piper1-gpl) | `1.4.2` | `1.8.0` |
| [playwright](https://github.com/microsoft/playwright-python) | `1.55.0` | `1.63.0` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.13.4` | `2.13.5` |
| [scipy](https://github.com/scipy/scipy) | `1.18.0` | `1.18.1` |
| [tokenizers](https://github.com/huggingface/tokenizers) | `0.22.2` | `0.23.2` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.52.4` | `0.54.0` |
| [accelerate](https://github.com/huggingface/accelerate) | `1.14.0` | `1.15.0` |
| [torch](https://github.com/pytorch/pytorch) | `2.13.0` | `2.14.0` |
| [transformers](https://github.com/huggingface/transformers) | `5.15.1` | `5.17.0` |
| [mlx](https://github.com/ml-explore/mlx) | `0.32.2` | `0.32.3` |



Updates `ninja` from 1.13.0 to 1.13.2
- [Release notes](https://github.com/ninja-build/ninja/releases)
- [Commits](ninja-build/ninja@v1.13.0...v1.13.2)

Updates `cryptography` from 46.0.5 to 50.0.1
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@46.0.5...50.0.1)

Updates `fastapi` from 0.141.1 to 0.142.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.141.1...0.142.1)

Updates `numpy` from 2.5.2 to 2.5.3
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.5.2...v2.5.3)

Updates `onnxruntime` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/microsoft/onnxruntime/releases)
- [Changelog](https://github.com/microsoft/onnxruntime/blob/main/docs/ReleaseNotesWorkflow.md)
- [Commits](microsoft/onnxruntime@v1.29.0...v1.30.0)

Updates `openai` from 3.3.1 to 3.22.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v3.3.1...v3.22.0)

Updates `piper-tts` from 1.4.2 to 1.8.0
- [Release notes](https://github.com/OHF-voice/piper1-gpl/releases)
- [Changelog](https://github.com/OHF-Voice/piper1-gpl/blob/main/CHANGELOG.md)
- [Commits](OHF-Voice/piper1-gpl@v1.4.2...v1.8.0)

Updates `playwright` from 1.55.0 to 1.63.0
- [Release notes](https://github.com/microsoft/playwright-python/releases)
- [Commits](microsoft/playwright-python@v1.55.0...v1.63.0)

Updates `pydantic` from 2.13.4 to 2.13.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.4...v2.13.5)

Updates `scipy` from 1.18.0 to 1.18.1
- [Release notes](https://github.com/scipy/scipy/releases)
- [Commits](scipy/scipy@v1.18.0...v1.18.1)

Updates `tokenizers` from 0.22.2 to 0.23.2
- [Release notes](https://github.com/huggingface/tokenizers/releases)
- [Commits](huggingface/tokenizers@v0.22.2...v0.23.2)

Updates `uvicorn` from 0.52.4 to 0.54.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.52.4...0.54.0)

Updates `accelerate` from 1.14.0 to 1.15.0
- [Release notes](https://github.com/huggingface/accelerate/releases)
- [Commits](huggingface/accelerate@v1.14.0...v1.15.0)

Updates `torch` from 2.13.0 to 2.14.0
- [Release notes](https://github.com/pytorch/pytorch/releases)
- [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md)
- [Commits](pytorch/pytorch@v2.13.0...v2.14.0)

Updates `transformers` from 5.15.1 to 5.17.0
- [Release notes](https://github.com/huggingface/transformers/releases)
- [Commits](huggingface/transformers@v5.15.1...v5.17.0)

Updates `mlx` from 0.32.2 to 0.32.3
- [Release notes](https://github.com/ml-explore/mlx/releases)
- [Commits](ml-explore/mlx@v0.32.2...v0.32.3)

---
updated-dependencies:
- dependency-name: ninja
  dependency-version: 1.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-runtime
- dependency-name: cryptography
  dependency-version: 50.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-runtime
- dependency-name: fastapi
  dependency-version: 0.142.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-runtime
- dependency-name: numpy
  dependency-version: 2.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-runtime
- dependency-name: onnxruntime
  dependency-version: 1.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-runtime
- dependency-name: openai
  dependency-version: 3.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-runtime
- dependency-name: piper-tts
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-runtime
- dependency-name: playwright
  dependency-version: 1.63.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-runtime
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-runtime
- dependency-name: scipy
  dependency-version: 1.18.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-runtime
- dependency-name: tokenizers
  dependency-version: 0.23.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-runtime
- dependency-name: uvicorn
  dependency-version: 0.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-runtime
- dependency-name: accelerate
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-runtime
- dependency-name: torch
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-runtime
- dependency-name: transformers
  dependency-version: 5.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-runtime
- dependency-name: mlx
  dependency-version: 0.32.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-runtime
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 3, 2026
@dependabot
dependabot Bot requested a review from debpalash as a code owner October 3, 2026 00:00
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 3, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 10, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 10, 2026
@dependabot
dependabot Bot deleted the dependabot/pip/requirements/python-runtime-bd82371758 branch October 10, 2026 00:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@debpalash debpalash Awaiting requested review from debpalash debpalash is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants